I got a little U2F token that I leave plugged into my laptop and set it up on everything that supports it. It's really nice because you don't have to stop and h

I got a little U2F token that I leave plugged into my laptop and set it up on everything that supports it. It's really nice because you don't have to stop and hunt down a code, or a phone or app, just tap the side and it lets you in. I just wish more sites supported it. In terms of both UX and authentication strength it's infinitely better than SMS/email/TOTP 2FA in every way. (My understanding is most alternatives, including SMS and google auth type TOTP, are still vulnerable to MitM attacks whereas U2F tokens solve that too).